
	Home > Ask the Oracle Experts > Database Design and Architecture Questions & Answers > Database security when users can connect without password

Ask The Oracle Expert: Questions & Answers

EMAIL THIS

Database security when users can connect without password

EXPERT RESPONSE FROM: Brian Peasland

		Pose a Question

		Other Oracle Categories

		Meet all Oracle Experts
		Become an Expert for this site

Oracle tips, scripts, and expert advice

Digg This! StumbleUpon Del.icio.us

QUESTION POSED ON: 11 July 2007
If you give sys / as sysdba it will connect to the database directly, so how can we give security to our database? By creating the password file, but after creating the password file it also will connect to the database using the above. How can we secure that one?

EXPERT RESPONSE
The only way you can connect to the database without a password (connect / as sysdba) is to be a member of the 'dba' group in Unix/Linux or the ORA_DBA group in Windows. So make sure users are not part of these groups. If someone other than the DBA needs DBA access to the database, then use the password file to grant them the appropriate access.

Digg This!

StumbleUpon

Del.icio.us

RELATED CONTENT

	Database Design and Architecture
	Should we worry about Oracle memory leaks on Windows?
	How to disable Oracle constraints and triggers during an import in 10g
	How to delete a partition on the F: drive with Oracle on Windows
	What could be causing an SQL count 0 with a successful Oracle import?
	What is a staging table, and how is the staging concept used in Oracle?
	Tips for how to size an Oracle server
	Oracle error 942 when exporting a schema
	Do DDL statements roll back, and why?
	Increasing Oracle storage capacity by moving to a new storage with minimum downtime
	Using Undo Tablespaces vs. rollback segments in Oracle 9i, 10g

Oracle database security

Oracle Security: Top five headlines

Oracle Identity Manager adds provisioning, compliance features

Firm dumps MySQL on Red Hat for Oracle Database on Oracle Linux

Oracle password best practices

Five ways to prepare for a SOX audit

When were the SYS/SYSTEM passwords last changed?

How to create a password file in Oracle 9i?

Bharosa to give Oracle users transaction security

Running a script without user's password to Oracle database

Storing documents in BLOBs vs. external FTP server

Oracle database design

Oracle database in the cloud floated at Harvard lab

Oracle OpenWorld 2008 Special Report

Weighing remote database administration pros and cons takes care

Oracle Database 11g makes waves at Burlington Coat Factory

How to create a database link in Oracle

Data modeling tools no substitute for hard work

How do I do that in Oracle?

The Oracle Database user's guide to Oracle OpenWorld 2007

Oracle OpenWorld 2007 Special Report

How many redo log files?

RELATED GLOSSARY TERMS

Terms from Whatis.com − the technology online dictionary

extent (SearchOracle.com)

field (SearchOracle.com)

flexfield (SearchOracle.com)

foreign key (SearchOracle.com)

quad tree (SearchOracle.com)

record (SearchOracle.com)

row (SearchOracle.com)

splay tree (SearchOracle.com)

RELATED RESOURCES

2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems

Search Bitpipe.com for the latest white papers and business webcasts

Whatis.com, the online computer dictionary

Search and Browse the Expert Answer Center
Search and browse more than 25,000 question and answer pairs from more than 250 TechTarget industry experts.

Browse our Expert Advice
Operating Systems IT Management Networking Database	Security Servers and Storage Applications and Development Career Center

SEARCH

TechTarget provides enterprise IT professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective IT purchase decisions and managing their organizations' IT projects - with its network of technology-specific Web sites, events and magazines.


TechTarget Corporate Web Site \| Media Kits \| Reprints \| Site Map All Rights Reserved, Copyright 2003 - 2008, TechTarget \| Read our Privacy Policy